ABSTRACT 

A method and system for manipulating permissions are disclosed. A label relating to a 
service accessible on a web server is determined by a first user on a web server. The label is 
returned to the first user and, in some cases, may be included in a permission. The label or 
permission can be delegated to a second user to enable the second user to obtain access to the 
service. The permission may be further delegated by the second or subsequent users. 
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